Remote IT Compliance Analyst – NIST/DISA & SOC 2

Spectraforce Technologies, Inc.; Jacksonville (FL); On-site; USD 80,000 - 120,000; Full time

Job summary

Spectraforce Technologies, Inc. is seeking an IT Systems Compliance Analyst to monitor and mature our compliance program for Infrastructure and Cloud Services. The role involves interfacing with auditors and technology owners to define and enforce policies, procedures, and evidence requirements across multiple frameworks.

The candidate will navigate STIGs and NIST controls, prepare CAPs for variances, and ensure evidence is ready for internal and external audits throughout the year.

Qualifications

• 3-5 years of related work experience in design, implementation, monitoring and troubleshooting technology.
• Experience with security frameworks such as NIST 800-53, DISA, CIS, HITRUST, PCI.

Responsibilities

• Monitor compliance programs for Infrastructure and Cloud Services.
• Interface with audit and security personnel, providing policies, procedures and evidence for audits.
• Collaborate with technology owners on application of policies and audit requirements.
• Maintain evidence repositories and ensure accessibility during audit events.
• Develop, update and align policies and procedures with CMS, ARS, HITRUST, SOC2, DISA standards.
• Navigate DISA STIGs documentation and NIST controls.
• Advise on remediation strategies and document CAPs for variances.
• Gather evidentiary documentation to support audits.

Skills

Critical thinking

Communication skills

Independent work

Adaptability

Interpersonal skills

Education

Bachelor's degree in IT

CompTIA Security+ or CISSP

Tools

Nessus

ACAS

WIZ

GAS

Nexpose

Job description

Spectraforce Technologies, Inc. is seeking an IT Systems Compliance Analyst to monitor and mature our compliance program for Infrastructure and Cloud Services. The role involves interfacing with auditors and technology owners to define and enforce policies, procedures, and evidence requirements across multiple frameworks.

The candidate will navigate STIGs and NIST controls, prepare CAPs for variances, and ensure evidence is ready for internal and external audits throughout the year.